Sicurezza della password¶
Come Weblate memorizza le password¶
Weblate uses a Django implementation to store hashed passwords; see How Django stores passwords.
The recommended Weblate configuration uses Argon2 with time_cost = 2, memory_cost = 102400, and parallelism = 8.
Suggerimento
The password hashing can be customized using PASSWORD_HASHERS.
Convalida della password¶
When a user is configuring a password, it is validated to reduce the risk of using weak passwords.
La configurazione consigliata di Weblate verifica:
La password deve contenere almeno 10 caratteri e un massimo di 72 caratteri.
Password similar to username and other attributes is rejected.
A common or overly simple password is rejected.
Any password user used recently is rejected.
Password strength is optionally checked using the zxcvbn algorithm.
Suggerimento
The password validation can be customized using AUTH_PASSWORD_VALIDATORS.
Autenticazione social o di terze parti¶
Weblate does not store any passwords or enforce any password policy when social or third-party authentication is configured. The passwords are, in such a case, fully managed externally.
Vedi anche
Autenticazione